Subscribe via RSS ... Subscribe via e-mail ... Follow me on Twitter ... Follow me on Facebook ...


News




AyCarrumba … testing

Well, the last missing features like depoisoning, correctly working half-duplex MITM with ARP poisoning and parsing DNS requests are finally implemented. Testing outside my own test environment will start at about 26. december. Bugfixing will take some time and I think after new year version 1.0 is available for download.

15/18 Dec. as dead line didn’t work. Sorry for that but as it is a private project without commercial interests, withouth stakeholders and so no pressure from outside : it’s there when it’s there.

Also I think some lines about the motivation behinde this project, the objectives and counter measures are necessary so also people without deeper technical background can see, understand and mainly react appropriately to this situation.

AyCarrumba

The last weeks were quite intensive. In theorie it looked plausible and logical but while putting the plan into practise some obstacles had to be overcome, namely getting back into libpcap, ARP man in the middle and TCP stream reassembly. I’m on track and the deadline (between 15. and 18. December) is still realistic …

Here in advance some screenshots

TCPReassemble

As mentioned earlier I’m going to upload sources that belong to the prototype of the new project. And as it is new, alpha and tested in a modest scope I cant guarantee it’s working without faults.

In case you encounter problems let me know and drop a mail.

TCPReassemble, as the name says, reassembles TCP data streams. Not perfectly and only a part of the stream as that was not the requirement. But the first steps are done that allows you to add further code to control the streams.
I ignore IP fragments (has it an influence at all?), wrong checksums and the order of the packets.

You can find the source here.

ARP man in the middle

The last week I dedicated my time to the ARP MITM engine and after some hours in trouble getting back control over the existing code tweaking and fixing things here and there it’s working like a charm. One of the cruxes is done on the other one i’ll start working tomorrow.
To make the tool extendible without putting permanently my fingers on the core system and let other people create their own customised plugins a central plugin system is required. I have already a prototype of such a system but have to integrate it in the current solution. Actually I have to recode the whole thing again :/

What can you expect

  • Probably a pile of C# code snippets
  • Maybe some C code snippets
  • Eventually a nice POC tool to put theory into practice

If you have questions drop a mail …

« Newer posts - Older posts »